Free scan · no signup
Your Site Is Up. That Doesn't Mean It's Working.
Your site can look perfectly healthy and still be leaking exposed files, a spoofable domain, broken share previews, or dead conversion paths. Sitewatch's free scan finds the silent failures a quick "all clear" hides — no signup to see your results.
- Finds exposed .env, .git, and forgotten staging sites
- Tells you if anyone can send email as your domain
- Catches broken link previews and dead contact paths
Free scan
Scan any URL free
Enter a URL and we run security, email, brand, and conversion checks in parallel. Results in under a minute — no signup to see them.
02What the scan finds
One scan. Every silent failure.
Exposed files & live staging
CriticalWe check whether your .env, .git, config backups, or a forgotten staging site are publicly downloadable right now. If we can reach it, so can anyone — a leaked credential is a breach waiting to happen.
A spoofable domain
CriticalWe read your SPF, DMARC, and DKIM records and tell you if someone can send email as your domain today — plus the exact record to publish to stop them. Your clients' inboxes are the ones that get phished.
Broken link previews
ModerateWe don't just check that your social image tag exists — we fetch it and confirm it actually renders. No more grey boxes when your link gets shared. Every share is a first impression.
Broken money paths
CriticalWe test the paths that turn visitors into customers — contact links, forms, and primary buttons — and flag the ones that are silently broken or point nowhere. A dead "Buy" or "Contact" path is the most expensive bug there is.
03How it works
Results in under a minute. No setup.
- 01
Enter your URL
That's the whole form. No account, no config, no credit card.
- 02
We scan
Security, email, brand, and conversion checks run in parallel against your live site.
- 03
You get a prioritized report
What's broken, why it matters, and how to fix it — ranked by severity, in plain English.
04Beyond uptime
What uptime monitors can't see
| Scenario | Uptime monitor | Sitewatch free scan |
|---|---|---|
| Email spoofability (SPF/DMARC/DKIM) | Not checked | Flagged, with the fix |
| Exposed files & staging | Not checked | Detected |
| Social preview actually renders | Tag presence at best | Fetched & verified |
| Broken conversion paths | Not checked | Tested |
| Result | "Up" or "Down" | Prioritized risk report |
Email spoofability (SPF/DMARC/DKIM)
- Uptime monitor:
- Not checked
- Sitewatch free scan:
- Flagged, with the fix
Exposed files & staging
- Uptime monitor:
- Not checked
- Sitewatch free scan:
- Detected
Social preview actually renders
- Uptime monitor:
- Tag presence at best
- Sitewatch free scan:
- Fetched & verified
Broken conversion paths
- Uptime monitor:
- Not checked
- Sitewatch free scan:
- Tested
Result
- Uptime monitor:
- "Up" or "Down"
- Sitewatch free scan:
- Prioritized risk report
05Why Sitewatch
Built for people who manage real sites, not dashboards
Evidence, not opinions
Every finding shows you the proof — the exposed path, the missing record, the broken preview — so you can act, not guess.
Made for agencies & freelancers
Built for managing many client sites without living in a dashboard. Run it on a prospect's site to win the work.
Turn a scan into monitoring
Like what you find? Watch it continuously and we'll catch it the moment it breaks again — on a schedule and after every deploy.
Free scan FAQ
Yes. Enter a URL and see your results with no account, no credit card, and no trial. The scan exists so you can see what Sitewatch finds before you decide to monitor continuously.
No. Results show on screen as soon as the scan finishes. You only create an account if you want to turn the scan into continuous monitoring.
Four things uptime monitors miss: publicly exposed files and staging sites, email spoofability (SPF, DMARC, and DKIM), whether your social link previews actually render, and broken conversion paths like dead contact links and forms.
An uptime monitor tells you the server responded. The Sitewatch scan tells you whether the site actually works — and what you've left exposed. A page can look perfectly healthy while its checkout is dead and its .env file is one URL away from anyone.
Yes. The scan only reads what's already publicly reachable — the same things any visitor or search engine can request. It checks a fixed list of known paths, never guesses or brute-forces, and masks any secret it finds in the report.
Yes. Turn any scan into continuous monitoring and Sitewatch re-checks on a schedule and after every deploy — so a problem you fixed gets caught again if it ever comes back.
07Explore more
Related pages
See what your site is hiding.
It takes about 30 seconds and you don't need an account to see your results. If everything's clean, that's worth knowing too.